If they're the browser then they can see non-public data since people will be browsing those pages.